add RSYSLOGCUSTOM pattern

a new rsyslog pattern for logstash 1.2 configs